Which statement about MAC Address Filter is true?

• A. It uses a list of MAC addresses to allow or deny DHCP leases
• B. It uses Option 60 to filter
• C. It negotiates with NAC
• D. It filters based on Relay-Agent

Answer: (A)

MAC address filtering bases its decisions on the hardware address of the client. A filter is configured with a list of MAC addresses that are either allowed or denied to obtain a DHCP lease. When a client requests a lease, the server checks the client’s MAC against this list and grants or blocks the lease accordingly. This approach directly controls DHCP access at the client level, independent of vendor information, NAC negotiations, or relay-agent details.

Option about vendor class (Option 60) is not how MAC filtering works, since Option 60 identifies the client’s vendor, not its hardware address. NAC interactions aren’t part of MAC filtering behavior, which operates purely on the MAC address. And filtering based on Relay-Agent information (such as Option 82) is a different mechanism that considers relay context rather than the client’s MAC.